CVE-2022-30118

Title for CVE: XSS in /dashboard/system/express/entities/forms/savecontrol/GUID: old browsers only.Description: When using Internet Explorer with the XSS protection disabled, editing a form control in an express entities form for Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 can...

Elefant CMS Cross-Site Scripting Vulnerability (CNVD-2022-58244)

Elefant CMS is a simple PHP content management system and web framework by Canadian John de Plume, an individual developer. A security vulnerability exists in Elefant CMS version 1.3.12-RC, which can be exploited by attackers to perform cross-site scripting attacks...

Elefant CMS Code Issues Vulnerabilities

Elefant CMS is a simple PHP content management system and web framework by Canadian John de Plume, an individual developer. A security vulnerability exists in Elefant CMS version 1.3.12-RC, which stems from unknown functionality in file/filemanager/upload/drop for component file uploads. A remote...

Unioncms Cross-Site Scripting Vulnerability

Unioncms is a content management system of China Union Capital Network Technology Unioncms Company. Unioncms v1.0.13 version of a cross-site scripting vulnerability, an attacker can exploit the vulnerability in the client to execute JavaScript code...

CVE-2022-30874

There is a Cross Site Scripting Stored XSS vulnerability in NukeViet CMS before 4.5.02...

ZZCMS SQL Injection Vulnerability (CNVD-2022-58306)

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by an attacker to perform a SQL injection attack via the id parameter in /user/dlsdownload.php...

ZZCMS SQL Injection Vulnerability (CNVD-2022-58305)

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by attackers to perform SQL injection attacks via the id parameter in /admin/deluser.php...

ZZCMS SQL Injection Vulnerability (CNVD-2022-58309)

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by an attacker to perform a SQL injection attack via the id parameter in /admin/showbad.php...

Elefant CMS Cross-Site Request Forgery Vulnerability (CNVD-2022-58960)

Elefant CMS is a PHP content management system and web framework. A cross-site request forgery vulnerability exists in Elefant CMS version 1.3.12-RC, which can be exploited by an attacker to perform a cross-site request forgery attack...

ZZCMS SQL Injection Vulnerability (CNVD-2022-58304)

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS version 2019, which stems from a SQL injection issue via dlid cookie in /dl/dlsendsms.php. No detailed vulnerability details are currently available...

ZZCMS SQL Injection Vulnerability (CNVD-2022-58307)

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by an attacker to perform a SQL injection attack via the id parameter in /user/dlsprint.php...

ZZCMS SQL Injection Vulnerability (CNVD-2022-58308)

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by an attacker to perform a SQL injection attack via the id parameter in /admin/dlsendmail.php...

PHPCMS 跨站脚本漏洞

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes news, images, downloads, information, products and other modules. A cross-site scripting vulnerability exists in PHPCMS version V9.6.3, which stems from a lack of filtering escapes for parameters on...

CVE-2022-31049

CVE-2022-31049 – TYPO3 Frontend Login Mailer XSS is a cross‑site scripting vulnerability in TYPO3. Prior to TYPO3 versions 9.5.34 ELTS, 10.4.29, and 11.5.11, user-submitted content was not properly encoded in HTML emails sent to users, with the actual affected components being mail clients that v...

CVE-2022-31046

TYPO3 Information Disclosure via Export Module (CVE-2022-31046): The export feature could leak internal details by not limiting the result set to allowed columns. Affected TYPO3 versions include 7.6.57 ELTS, 8.7.47 ELTS, 9.5.35 ELTS, 10.4.29, and 11.5.11. Remediation: upgrade to the fixed release...

CVE-2021-41663

A cross-site scripting XSS vulnerability exists in Mini CMS V1.11. The vulnerability exists in the article upload: post-edit.php page...

ZZCMS SQL Injection Vulnerability (CNVD-2022-56481)

ZZCMS is a content management system CMS by the ZZCMS team in China. zzCMS version 2019 is vulnerable to SQL injection, which stems from the lack of single quotes in the id parameter of /admin/dlsendsms.php. No detailed vulnerability details are currently available...

ZZCMS SQL Injection Vulnerability (CNVD-2022-56480)

ZZCMS is a content management system CMS from the ZZCMS team in China. zzCMS version 2019 is vulnerable to SQL injection, which stems from the lack of security filtering of the id parameter in /dl/dldownload.php. No detailed vulnerability details are provided at this time...

ZZCMS SQL Injection Vulnerability (CNVD-2022-56479)

ZZCMS is a content management system CMS from the ZZCMS team in China. zzCMS version 2019 is vulnerable to SQL injection, which stems from the lack of security filtering of the id parameter in /dl/dlprint.php. No detailed vulnerability details are provided at this time...

BrowsBox CMS SQL Injection Vulnerability

BrowsBox CMS is a content management system from BrowsBox Belgium. v4.0 of BrowsBox CMS is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...